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AMENDMENTS TO THE CLAIMS: 

This listing of the claims will replace all prior versions, and listings, of the claims in this 
application. 

Listing of Claims: 

1 . (Currently Amended) A method, comprising: 

using a sp e cific r e cord an authorization and authentication profile associated with a 
use r, wh e r e in th e sp e cific r e cord is stor e d at a s e rv e r nod e, including 

the authorization and authentication profile is sent from an authentication and 
authorization device located in a home network to a server node; and 

the authorization and authentication profile is stored at the server node, wherein 
the specific record authorization and authentication profile contains information that 
determines that a user characteristic i s to be verified which allows the server node to 
authorize and authenticate the user directly without contacting the authentication and 
authorization device with a hom e n e twork prior to providing acc e ss to said s e rvice , and 
wherein the authorization and authentication profile further contains information defining that 
the authentication and authorization device is to be contacted for th e user is verified when the 
a number of simultaneous sessions for the user is equal to a predetermined number. 

2. (Currently Amended) The method as claimed in claim 1, further comprising: 
transferring said information from an auth e ntication, authorization and accounting 

home server the authentication and authorization device to the server node in at least one of a 
signaling path for a service setup, a service event, or and a registration , or a combination 
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th e r e of 

3. (Currently Amended) The method as claimed in claim 1, furth e r comprising: 
deciding, based on wherein said information indicates , that at least one of the 

authentication or and authorizatio n, or both , needs to be verified. 

4. (Currently Amended) The method as claimed in claim 1, further comprising: 
performing at least one of the authentication of and the authorizatio n, or both, of the 

user . 

5. (Currently Amended) The method as claimed in claim 4, further comprising: 
performing at least one of the authentication or and the authorization , or both, of the 

user by using an authentication, authorization and accounting home s e rver the authentication 
and authorization device . 

6. (Currently Amended) The method as claimed in claim 4, further comprising: 
performing where at least one of the authentication or and the authorizatio n, or both, 

of the user is performed in the server node when the required parameters are available. 

7. (Currently Amended) A method, comprising: 

using a us e r specific record an authorization and authentication profile associated with 
a user, wherein the authorization and authentication profile is received from an authentication 
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and authorization device located in a home network, wherein the user specific record 
authorization and authentication profile is stored in a server node , wherein the authorization 
and authentication profile contains information which allows the server node to authorize and 
authenticate the user directly without contacting the authentication and authorization device, 
and wherein the information further includes that indicat e s a condition that, when satisfied, 
determines that a us e r charact e ristic is to b e v e rifi e d with a hom e n e twork prior to providing 
acc e s s to a s e rvic e the authentication and authorization device is to be contacted ; and 

providing access to said a service responsive to said user sp e cific record authorization 
and authentication profile , wherein the condition is that authorization and authentication is 
verified with the authentication and authorization device when the a number of simultaneous 
sessions is equal to a predetermined number. 

8. (Currently Amended) The method as claimed in claim 7, further comprising: 
determining whether said condition is satisfied; and 

providing access to said service without v e rifying said user charact e ristic authorizing 
and authenticating the user when said condition is not satisfied. 

9. (Currently Amended) The method as claimed in claim 7, further comprising: 
determining whether said condition is satisfied; 

verifying said user charact e ristic authorizing and authenticating the user when said 
condition is satisfied; and 

subsequent to said v e rifying of th e us e r characteristi c authorizing and authenticating 
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the user , providing access to said service when said us e r charact e ristic authorizing indicates 
that the user is permitted to access said service. 

10. (Previously Presented) The method as claimed in claim 7, further comprising: 

determining whether said condition is satisfied when a call session between said user 
and a service provider node is initiated. 

1 1 . (Currently Amended) The method as claimed in claim 7, further comprising: 
determining from the us e r sp e cific r e cord authorization and authentication profile 

associated with said user when said condition exists during a call session between a user 
terminal and a service provider node. 

12. (Currently Amended) The method as claimed in claim 7, further comprising: 
indicating, via said us e r sp e cific r e cord authorization and authentication profile , when 

access to said service is permitted without determining, from data stored at a server node in 
said home network, whether access is permitted. 

13. (Cancelled) 

14. (Currently Amended) The method as claimed in claim 7, further comprising: 
generating a register message at a user terminal and transmitting said register message 
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to a local server node; 

determining whether a condition indicated by said us e r sp e cific r e cord an 
authorization and authentication profile stored at said local server node is satisfied; 

generating an access message at said local server node indicating that access to said 
service is permitted; and 

transmitting said access message to a service provider node. 

15. (Currently Amended) The method as claimed in claim 14, further comprising: 
prior to said storing of said us e r specific record authorization and authentication 

profile , generating a request message at said local server node and transmitting said request 
message to a hom e auth e ntication, authorization and accounting s e rv e r of th e us e r the 
authentication and authorization device ; and 

transferring receiving data comprising said user specific record authorization and 
authentication profile from said home authentication, authorization and accounting server of 
th e us e r authentication and authorization device to said local s e rv e r nod e responsive to said 
request message. 

16. (Currently Amended) The method as claimed in claim 7, further comprising: 
generating an invite message at a user terminal and transmitting said invite message to 

a local server node; 

determining whether a condition indicated by said user sp e cific record an 
authorization and authentication profile stored at said local server node is satisfied; 
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generating an access message at said local server node indicating that access to said 
service is permitted; and 

transmitting said access message to a service provider node. 

17. (Currently Amended) The method as claimed in claim 7, wherein said us e r 
charact e ristic compris e s information indicates whether said user is authorized to access said 
service. 

18. (Currently Amended) The method as claimed in claim 7, wherein said user 
charact e ristic compris e s information indicates whether said user is authenticated to access 
said service. 

19. (Currently Amended) The method as claimed in claim 7, wherein said 
condition determines the a frequency at which said user is to be at least one of authorized or 
authenticated , or both, during a call session between said a user terminal and a service 
provider node. 

20. (Cancelled) 

21. (Currently Amended) An apparatus, comprising: 

rec e iving m e ans for r e ceiving at least one interface configured to receive a message 
from a user terminal ; storing means for storing a user specific record and to receive an 
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authorization and authentication profile associated with a user from an authentication and 
authorization device located in a home network; 

a memory configured to store the authorization and authentication profile associated 
with a the use r, wherein the authorization and authentication profile contains information 
which allows the user to be authorized and authenticated directly with the apparatus without 
contacting the authentication and authorization device, and wherein the information further 
includes indicating a condition that, when satisfied, determines that a user charact e ristic is to 
b e verified with a hom e n e twork prior to providing th e us e r with acc e ss to a s e rvicej he 
authentication and authorization device is to be contacted ; and 

g e n e rating means for g e neratin g the apparatus configured , in response to said user 
sp e cific r e cord authorization and authentication profile , to generate an access message to 
provide sakl a user with access to said a service from a service provider node, wherein the 
condition is that authorization and authentication is verified with the authentication and 
authorization device when the a number of simultaneous sessions is equal to a predetermined 
number. 

22-28. (Cancelled) 

29. (Currently Amended) A method, comprising: 

storing an authorization and authentication profile, associated with a user, wherein the 
authorization and authentication profile is stored at a serving node in a serving network 
wherein the authorization and authentication profile is received from an authentication and 
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authorization device located in a home network, ; and 

using said authorization and authentication profile at said serving node, wherein said 
authorization and authentication profile contains informatio n which allows the user to be 
authorized and authenticated directly with the serving node in the serving network without 
contacting the authentication and authorization device, wherein the information further 
includes indicating a condition that, when satisfied, determines that a us e r charact e ristic is to 
b e v e rifi e d with a home n e twork prior to providing acc e ss to said s e rvic e the authentication 
and authorization device is to be contacted , and wherein the condition is that authorization 
and authentication is verified with the authentication and authorization device when the a 
number of simultaneous sessions is equal to a predetermined number is equal to a 
predetermined number. 

30. (Currently Amended) An apparatus, comprising: 
an interface configured to receive a message from a user terminal; aftd 
a receiver configured to receive data comprising an authorization and authentication 
profile from an authentication and authorization device located in a home network; 
a memory configured to store said authorization and authentication profile; 
a processor configured to use a user specific record an authorization and 
authentication profile associated with said use r terminal, wherein the authorization and 
authentication profile contains information which allows a user to be authorized and 
authenticated directly with the apparatus without contacting an authentication and 
authorization device located in a home network, and wherein the information further includes 



10 



S.N.: 10/500,370 
Art Unit: 2617 

to indicat e a condition that, when satisfied, determines that a us e r characteristic is to b e 
v e rifi e d with a hom e n e twork prior to providing said us e r with acc e ss to a s e rvic e the 
authentication and authorization device is to be contacted , wh e r e in th e us e r specific r e cord is 
stored in a server nod e , and 

the processor configured to generate, in response to said user specific record 
authorization and authentication profile , an access message to provide said user with access to 
said a service from a service provider node, wherein the condition is that authorization and 
authentication is verified with the authentication and authorization device when the a number 
of simultaneous sessions is equal to a predetermined number. 

3 1 . (Currently Amended) An apparatus, comprising: 
a processor configured to use a us e r sp e cific r e cord an authorization and 
authentication profile associated with a use r, wherein the authorization and authentication 
profile contains information which allows the user to be authorized and authenticated directly 
with the apparatus without contacting the authentication and authorization device, and 
wherein the information further includes to indicat e a condition that, when satisfied, 
determines that the authentication and authorization device is to be contacted a-user 
characteristic is to b e verified with a home n e twork prior to providing said user with access to 
a s e rvic e , wh e r e in th e us e r sp e cific r e cord is stor e d in a s e rv e r nod e, and 

the processor configured to generate, in response to said user specific r e cord 
authorization and authentication profile , an access message to provide said user with access to 
said a service from a service provider node, wherein the condition is that authorization and 
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authentication is verified with the authentication and authorization device when the a number 
of simultaneous sessions is equal to a predetermined number. 

32. (Previously Presented) The apparatus as claimed in claim 30, further 
comprising: 

a transmitter configured to transmit said access message to the service provider node. 

33. (Cancelled) 

34. (Previously Presented) The apparatus as claimed in claim 30, the apparatus 
comprising a serving or proxy-call session control function node. 

35. (Currently Amended) The apparatus as claimed in claim 30, wherein said user 
sp e cific r e cord authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication er and 
authorizatio n, or both, of said user is required in order to access said service. 

36. (Cancelled) 

37. (Currently Amended) The apparatus as claimed in claim 31, wh e r e in said 
controller further compris es comprising storage configured to store a us e r specific record the 
authorization and authentication profile . 
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38. (Previously Presented) The apparatus as claimed in claim 31, further 
comprising: 

a transmitter configured to transmit said access message to the service provider node. 

39. (Cancelled) 

40. (Previously Presented) The apparatus as claimed in claim 31, the apparatus 
comprising a serving or proxy-call session control function node. 

41 . (Currently Amended) The apparatus as claimed in claim 3 1 , wherein said «seF 
sp e cific r e cord authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication er and 
authorization , or both, of said user is required in order to access said service. 

42. (Currently Amended) A method, comprising: 
receiving a message from a user terminal; 

receiving data comprising said authorization and authentication profile, where the data 
is received from an authentication and authorization device located in a home network; 

using a us e r specific record an authorization and authentication profile associated with 
a user of said user terminal, wherein the authorization and authentication profile contains 
information which allows the user to be authorized and authenticated directly with a server 
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node without contacting the authentication and authorization device, wherein the information 
further includes indicating a condition that, when satisfied, determines that a us e r 
charact e ristic is to b e v e rified with a hom e n e twork prior to providing said user with acc es s to 
a servic e the authentication and authorization device is to be contacted , and wherein the use? 
sp e cific r e cord authorization and authentication profile is stored in a the server node; and 

generating, in response to said us e r sp e cific r e cord authorization and authentication 
profile , an access message providing said user with access to said a service from a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions is 
equal to a predetermined number. 

43. (Previously Presented) The method as claimed in claim 42, further 
comprising: 

transmitting said access message to the service provider node. 

44. (Cancelled) 

45. (Currently Amended) The method as claimed in claim 42, wherein said user 
specific record authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication ef- and 
authorization , or both, of said user is required in order to access said service. 
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46. (Currently Amended) A method, comprising: 

receiving data comprising an authorization and authentication profile, where the data 
is received from the authentication and authorization device: 

using a user specific record an authorization and authentication profile associated with 
a use r, wherein the authorization and authentication profile contains information which 
allows the user to be authorized and authenticated directly with a server node without 
contacting an authentication and authorization device located in a home network, wherein the 
information further includes indicating a condition that, when satisfied, determines that a user 
characteristic is to be v e rified with a home network prior to providing said user with access to 
a s e rvic e the authentication and authorization device is to be contacted , and wherein the user 
sp e cific r e cord an authorization and authentication profile is stored in a the server node; and 

generating, in response to said us e r sp e cific record authorization and authentication 
profile , an access message providing said user with access to said a service from a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions is 
equal to a predetermined number. 

47. (Previously Presented) The method as claimed in claim 46, further 
comprising: 

transmitting said access message to the service provider node. 

48. (Cancelled) 
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49. (Currently Amended) The method as claimed in claim 46, wherein said user 
sp e cific r e cord authorization and authentication profile comprises a first data field identifying 
said user and a second data field determining when at least one of authentication e* and 
authorizatio n, or both, of said user is required in order to access said service. 

50. (Currently Amended) A comput e r program e mbodi e d on a computer-readable 
storage medium embodying a computer program , the program configured to control a 
executable by a processor to perform a process, the proc e ss operations comprising: 

receiving a message from a user terminal; 

receiving data comprising an authorization and authentication profile, where the data 
is received from an authentication and authorization device; 

using a specific record an authorization and authentication profile associated with a 
user of the user terminal, wherein the authorization and authentication profile contains 
information which allows the user to be authorized and authenticated directly with a server 
node without contacting an authentication and authorization device located in a home 
network, wherein the information further includes indicating a condition that, when satisfied, 
determines that a user characteristic is to b e verifi e d with a home network prior to providing 
said us e r with acc e ss to a s e rvic e the authentication and authorization device is to be 
contacted , and wherein the us e r sp e cific r e cord authorization and authentication profile is 
stored in a the server node; and 

generating, in response to said user specific record authorization and authentication 
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profile , an access message providing said user with access to said a^service from a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions is 
equal to a predetermined number. 

5 1 . (Currently Amended) A comput e r program e mbodi e d on a computer-readable 
storage medium embodying a computer program , the program configur e d to control a 
executable by a processor to perform a process, the proc e ss operations comprising: 

using a specific record an authorization and authentication profile associated with a 
use r, wherein the authorization and authentication profile contains information which allows 
the user to be authorized and authenticated directly with a server node without contacting an 
authentication and authorization device located in a home network, wherein the information 
further includes indicating a condition that, when satisfied, determines that a us e r 
characteristic is to bo verified with a homo network prior to providing said user with access to 
a s e rvic e the authentication and authorization device is to be contacted , and wherein the user 
specific record authorization and authentication profile is stored in a the server node; and 

generating, in response to said user specific record authorization and authentication 
profile , an access message providing said user with access to said a service from a service 
provider node, wherein the condition is that authorization and authentication is verified with 
the authentication and authorization device when the a number of simultaneous sessions for 
the user is equal to a predetermined number. 
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